CVE-2014-3570

Name	CVE-2014-3570
Description	The BN_sqr implementation in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not properly calculate the square of a BIGNUM value, which might make it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors, related to crypto/bn/asm/mips.pl, crypto/bn/asm/x86_64-gcc.c, and crypto/bn/bn_asm.c.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub code/issues, web search, more)
References	DLA-132-1, DSA-3125-1
NVD severity	medium

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
openssl (PTS)	jessie	1.0.1t-1+deb8u8	fixed
	jessie (security)	1.0.1t-1+deb8u12	fixed
	stretch	1.1.0k-1~deb9u1	fixed
	stretch (security)	1.1.0l-1~deb9u1	fixed
	buster, buster (security)	1.1.1d-0+deb10u2	fixed
	bullseye, sid	1.1.1d-2	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Origin
openssl	source	(unstable)	1.0.1k-1
openssl	source	squeeze	0.9.8o-4squeeze19	DLA-132-1
openssl	source	wheezy	1.0.1e-2+deb7u14	DSA-3125-1

https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=a7a44ba55cb4f884c6bc9ceac90072dea38e66d